3 matches found
CVE-2018-19446
A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution...
CVE-2018-19446: Incorrect Permission Assignment for Critical Resource
A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution...
PT-2019-9812
Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description The issue allows a File Write to occur for specially crafted PDF files when the JavaScript API Doc.createDataObject is used. This can be leveraged by an attacker to gain remo...